Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)

[Stefan Esser <s.esser () e-matters de>]

On Mon, Dec 16, 2002 at 11:56:10PM -0500, Valdis.Kletnieks () vt edu wrote:
> *ON THE WIRE*, all 256 byte codes are legal, since DNS uses a length-data

Yes noone said it is not, but fact is, the libc resolvers simply do not
allow them, so you can send through the wire whatever you want it will
not find its way to the fingerd.

Stefan Esser

Attachment: _bin
Description: